Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: FaHyS1OeRfQzPPNTt1+YyOZTgJwQtRgZ6YjLa3eseoM=
Subject key identifier: E9:0B:CE:C9:7C:40:EE:34:6B:14:30:00:05:1D:3C:97:5B:A2:8C:AA
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 0194BBCE119978F71949AF348FA15A262D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: MTdAZZVBNyjkum7vvSzYwa+XdQ5a1yhhxjnStiCAKj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:11:99:78:f7:19:49:af:34:8f:a1:5a:26:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=e90bcec97c40ee346b143000051d3c975ba28caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:59:ec:c0:b7:ef:9e:b9:3e:b3:b8:d1:4d:93:
e7:b9:5c:df:fb:a0:1b:9f:ab:35:2d:97:a3:d0:7c:
5e:99:f4:b9:d5:65:36:16:6d:68:5c:c4:ab:5a:6d:
c3:4c:b7:16:e0:f2:d0:62:1b:3e:47:4b:74:3b:c8:
9f:8e:34:78:2f:b0:51:4f:1d:b7:f6:5e:f1:85:5c:
ef:d4:60:21:5f:a7:5f:5e:cd:e6:22:35:0c:1a:73:
1c:0a:d5:33:da:af:d7:8c:b0:4c:c4:ae:4c:9c:80:
c7:6b:08:70:f2:e7:b5:7f:7d:c7:cb:68:f4:43:92:
c7:8b:00:e3:4f:42:b7:10:d0:98:47:0c:5c:78:61:
4f:6a:c8:35:a0:87:43:73:90:2a:80:34:43:e7:e1:
26:78:05:a4:2f:0c:b4:e7:de:af:18:5a:48:a3:65:
47:00:35:8c:1d:40:a1:54:0e:5c:51:d0:b2:80:61:
c0:e9:c1:ef:de:69:f1:75:97:70:cf:0e:c3:f9:6f:
2c:45:02:d2:85:2d:cb:80:af:5f:a5:b8:93:69:85:
58:28:40:36:a4:16:e6:3c:60:c6:56:fd:52:d7:64:
2b:28:25:8d:c3:54:14:eb:6d:a7:1a:cb:d7:b4:a3:
b1:2c:56:95:ba:a7:60:64:5a:ce:e4:d5:79:73:a9:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:CE:C9:7C:40:EE:34:6B:14:30:00:05:1D:3C:97:5B:A2:8C:AA
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7f:ee:f9:01:85:5a:85:d7:ba:f5:75:d8:5d:9a:34:be:63:
81:a4:0f:81:96:66:8d:ae:c0:af:fd:d0:d6:28:14:06:1e:d8:
4f:90:6c:52:cd:db:90:3d:23:ec:ba:7d:f4:e2:e2:87:e0:af:
2f:58:87:ce:15:6e:e6:1a:0a:61:0f:e4:a8:aa:ef:d6:b5:58:
d5:79:7f:43:a3:70:51:da:fd:1e:7c:3c:68:32:08:e0:71:bb:
6f:4c:4c:0a:9c:37:6a:04:03:1f:b8:bf:76:36:09:b9:04:be:
1a:fd:44:eb:2c:c8:a2:09:b1:17:e9:50:d6:fd:a5:e9:ab:bf:
8d:38:37:c2:f9:cc:11:46:19:32:1c:21:d5:59:3a:fc:e1:4c:
83:cf:8c:30:f5:3e:49:69:15:13:e6:f6:7e:dc:3c:c6:93:28:
1d:ea:ec:ce:77:e4:58:5d:2e:5c:f2:c5:ac:b0:2e:3d:cd:50:
db:c2:09:7b:59:8d:c8:48:c9:40:6b:73:94:d9:d3:05:64:4d:
76:a6:cb:ef:c5:be:10:27:f9:69:bb:d6:db:48:0e:de:63:28:
14:c9:30:e5:2c:46:08:7c:b8:1e:2c:ea:aa:dc:8e:b5:64:2f:
bc:9f:2f:c4:cd:a9:3b:87:2a:dd:2f:d0:79:d5:f8:21:af:36:
f5:bc:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:50 2025 by rpki-client